Privacy Policy

Last updated 20 September 2026

Neura is a goal-mapping app. This policy describes exactly what it stores about you, who else can see it, which companies process it on our behalf, and how to make all of it go away. It covers the Neura mobile app and the web app at neuramap.app.

Who we are

Neura is operated by the developer of the Neura app. For anything in this policy — including a request to see or delete your data — write to support@neurainfo.app. We answer within 30 days, and usually much sooner.

What we collect, and why

Everything below is either something you typed in yourself or something your sign-in provider handed us. We do not collect your location, your contacts, your browsing history, your device advertising identifier, or anything from other apps.

Account identity

Depending on how you sign in: your email address (email & password, Google, Apple), or your Telegram account id, username and profile photo. Sign in with Apple may give us a relay address rather than your real one — that is fine, we never need the real one. Used to sign you in and to keep your goals attached to you. Guest accounts carry no identity at all, just an anonymous id.

Display name and avatar

The nickname you choose and the picture you upload, if you upload one. Shown to other people you share a goal with, and on any goal you publish.

Your goals

The goals, nodes, tasks, notes and images you create. Private by default. Used to render your map and sync it between your devices.

Connections

Your friends list and your membership in goals other people invited you to, with the role you hold there.

Settings

Your accent colour, your theme, and the inactivity period after which your account self-deletes.

Activity timestamp

When you last signed in. This is what the automatic deletion below counts from; it is not a usage log and we do not record what you looked at.

Abuse controls

When you generate a map with AI or upload an image, a short-lived counter keyed to your account and your IP address is kept for rate limiting. It expires on its own within hours and is never used to identify or profile you.

Reports you file

If you report content, we keep what you reported, your account id and the reason you gave, so we can act on it and so the same account cannot be used to file abusive reports.

What other people can see

Your goals are private by default. Two things change that, and only you can trigger either:

• Inviting someone into a goal. Members you invite can see that goal's contents, and your display name and avatar.
• Publishing a goal. A published goal appears on the public map. Anyone using Neura can then see that goal, its contents, and the display name and avatar of whoever published it. You can unpublish it again at any time, but treat anything you publish as public — other people may have already seen it.

Your email address and your phone number are never shown to other users.

Companies that process data for us

We keep this list as short as we can. Each of these acts as our processor and is only permitted to use the data to provide its service to us.

• Google (Firebase Authentication and Realtime Database) — stores your account and your goals.
• Cloudinary — stores the images you upload, in a folder scoped to your account.
• Google (Gemini API), with Groq as a fallback — when you ask Neura to build a map from a sentence, that sentence is sent to one of these to be turned into a structure. Nothing about your identity is sent with it.
• Vercel — hosts the website and the API, and keeps short-lived server logs.
• Upstash — holds the temporary rate-limit counters described above.

If you sign in with Google, Apple or Telegram, that provider necessarily learns that you signed in to Neura. Their own privacy policies govern that.

How long we keep it

Your account deletes itself. If you do not sign in for the period set in Profile → Data & privacy — three months by default, adjustable between one month and two years — your account, your goals and your uploaded files are permanently deleted. Signing in resets the clock. The feature cannot be switched off; only the interval is yours to choose.

You can delete it yourself at any time, in Profile → Delete account. That removes your goals, your uploaded files, your entries in other people's friend lists, your reserved nickname and your sign-in account. Goals other people created and invited you into stay with them — only your membership is removed. Deletion is immediate and cannot be undone.

Content you published to the public map, and reports filed about content, may be retained for a reasonable period after deletion where we need them to handle abuse.

Your rights

Depending on where you live, you may have the right to access, correct, export or erase your personal data, to object to or restrict processing, and to complain to your data protection authority. The app gives you erasure directly; for anything else write to support@neurainfo.app and we will action it within 30 days. We will not charge you for it or treat you differently for asking.

Where the GDPR applies, our legal basis is the performance of our contract with you (running the account and syncing your goals) and our legitimate interest in keeping the service secure and free of abuse (the rate-limit counters and report records).

Children

Neura is not directed at children. You must be at least 13 years old to use it, or 16 if you are in the European Economic Area or the United Kingdom. We do not knowingly collect data from anyone younger; if you believe a child has created an account, write to support@neurainfo.app and we will delete it.

Where your data lives

Our providers operate globally and your data may be processed outside your country, including in the United States. Where required, transfers rely on the European Commission's Standard Contractual Clauses, which those providers offer.

Security

Access to your goals is enforced by server-side database rules, not merely by the app: another account cannot read a private goal of yours even with a modified client. Uploads go through our own server rather than straight to storage, and each file lands in a folder only your account may write to or delete from. Traffic is encrypted in transit. No system is perfect, and we will tell affected users promptly if a breach ever occurs.

Changes

If this policy changes materially we will update the date at the top and, for changes that affect how your data is used, tell you in the app before they take effect.